Aaron Powell
068a95f1c9
Merge pull request #787 from fizamusthafa/add-entra-agent-user-skill
...
feat: add entra-agent-user skill
2026-02-24 10:55:05 +11:00
Aaron Powell
a0c26e10af
Merge branch 'staged' into add-entra-agent-user-skill
2026-02-24 10:54:12 +11:00
Aaron Powell
63faa5bff9
Merge pull request #754 from DavidARaygoza/dev/davidraygoza/CppLSToolsInstructions
...
Add custom instructions for using C++ language service tools
2026-02-24 10:53:57 +11:00
Aaron Powell
9a2c93f158
Merge pull request #743 from bhect0/main
...
Add Moodle instructions
2026-02-24 10:53:05 +11:00
Aaron Powell
4d7760f138
Cleaning up the plugins folder
2026-02-24 10:50:48 +11:00
Aaron Powell
a6189179af
Merge branch 'staged' into main
2026-02-24 10:49:14 +11:00
Aaron Powell
afe0f3aef2
Merge pull request #774 from ramyashreeshetty/add-bigquery-pipeline-audit-prompt
...
Add bigquery pipeline audit prompt
2026-02-24 10:46:15 +11:00
Aaron Powell
f1ff12f094
Cleaning up the plugins folder
2026-02-24 10:43:30 +11:00
Aaron Powell
cd844a6566
Merge branch 'staged' into add-bigquery-pipeline-audit-prompt
2026-02-24 10:42:26 +11:00
Aaron Powell
3d0b7777fe
Merge pull request #800 from github/chore/clean-materialized-plugins
...
Add cross-platform script to clean materialized plugin files
2026-02-24 10:38:54 +11:00
Aaron Powell
941aced1f3
Add script to clean materialized plugin files
...
Adds eng/clean-materialized-plugins.mjs which removes agents/, commands/,
and skills/ subdirectories from plugin folders. These are generated by CI
via eng/materialize-plugins.mjs during publish and should not be tracked on
the staged branch.
Runnable via: npm run plugin:clean
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-02-24 10:34:26 +11:00
Aaron Powell
05116b2492
Merge pull request #727 from lance2k/feat-add-context7-instruction
...
Add Context7 instructions for authoritative external documentation usage
2026-02-24 10:29:41 +11:00
Aaron Powell
46afbf68fb
Cleaning up the plugins folder
2026-02-24 10:28:46 +11:00
Aaron Powell
329796314a
Merge pull request #783 from agreaves-ms/fix/marketplace-plugin-source
...
fix: update plugin source paths in marketplace.json generation
2026-02-22 13:33:19 +11:00
Fiza Musthafa
cc2d5acdbc
feat: add entra-agent-user skill for creating Agent Users in Microsoft Entra ID
2026-02-21 12:04:15 +01:00
Allen Greaves
6951523c6e
fix: update plugin source paths in marketplace.json generation
2026-02-20 14:44:09 -08:00
github-actions[bot]
96b943af32
chore: publish from staged [skip ci]
2026-02-20 17:52:47 +00:00
Héctor Benedicte
40bc8e7b0d
Merge branch 'github:staged' into staged
2026-02-20 18:52:29 +01:00
Ramyashree Shetty
e13e02bea6
feat: add BigQuery pipeline audit prompt and list it in the documentation.
2026-02-20 14:57:15 +05:30
github-actions[bot]
98501a55b0
chore: publish from staged [skip ci]
2026-02-20 04:47:18 +00:00
Aaron Powell
7bebd4a385
Merge pull request #745 from codeHysteria28/add-copilot-usage-metrics-skill
...
Add copilot-usage-metrics skill
2026-02-20 15:46:56 +11:00
Aaron Powell
4dfcb55937
Fixing the readme
2026-02-20 15:45:55 +11:00
Aaron Powell
87fb17b7d9
chore: remove materialized plugin files from tracking
...
These agents/, commands/, and skills/ directories inside plugin folders
are generated by eng/materialize-plugins.mjs during CI publish and
should not be committed to the staged branch.
- Remove 185 materialized files from git tracking
- Add .gitignore rules to prevent accidental re-commits
- Update publish.yml to force-add materialized files despite .gitignore
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-02-20 15:43:09 +11:00
David Raygoza
c1931fa4fb
Add custom instructions for using C++ language service tools
2026-02-19 16:17:37 -08:00
Aaron Powell
293d9737cb
Merge branch 'main' into feat-add-context7-instruction
2026-02-19 15:29:24 +11:00
Aaron Powell
f5e992194a
Merge branch 'main' into main
2026-02-19 15:28:57 +11:00
Aaron Powell
8fcf6513cf
Merge branch 'main' into add-copilot-usage-metrics-skill
2026-02-19 15:28:42 +11:00
github-actions[bot]
812febf350
chore: publish from staged [skip ci]
2026-02-19 04:11:47 +00:00
Aaron Powell
8ac0e41cb0
Merge pull request #750 from github/plugin-migration
...
refactor: migrate plugins to Claude Code spec format
2026-02-19 15:11:15 +11:00
Aaron Powell
84b44cab9e
Merge pull request #759 from github/agentic-workflows
...
Add weekly resource staleness report agentic workflow
2026-02-19 15:10:36 +11:00
Aaron Powell
e20084d50f
Merge remote-tracking branch 'origin/main' into plugin-migration
2026-02-19 10:54:38 +11:00
Aaron Powell
05ab97934a
Add weekly resource staleness report agentic workflow
...
Scans agents, prompts, instructions, hooks, and skills folders to
identify resources that haven't had a major change in over 30 days
(stale) or 14 days (aging). Runs weekly or on demand and files a
GitHub issue with the report.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-02-19 10:19:17 +11:00
Aaron Powell
f880e1268f
Merge pull request #757 from imran-siddique/add-agent-governance-instructions
...
feat: add agent-safety instructions and governance reviewer agent
2026-02-19 10:15:41 +11:00
Aaron Powell
41b70bca87
Merge pull request #756 from imran-siddique/add-governance-audit-hook
...
feat: add governance-audit hook — threat detection for Copilot sessions
2026-02-19 10:14:17 +11:00
Aaron Powell
f256cb2ada
Merge pull request #755 from imran-siddique/add-agent-governance-skill
...
feat: add agent-governance skill — governance patterns for AI agent systems
2026-02-19 10:12:30 +11:00
Aaron Powell
8f5f427942
Merge pull request #752 from luizbon/feat/agent-manager
...
Add VS Code Agent Manager tool with features for managing Copilot agents
2026-02-19 10:10:29 +11:00
Imran Siddique
03290d78d0
fix: add applyTo field to agent-safety instructions frontmatter
...
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-02-18 14:51:18 -08:00
Imran Siddique
070cb0222e
fix: address Copilot PR review comments on agent-governance skill
...
- Use context manager and path validation for file reading example
- Block directory traversal attacks with os.path.realpath check
- Update terminology: whitelist/blacklist -> allowlist/blocklist
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-02-18 14:50:40 -08:00
Imran Siddique
32d8f7f622
fix: address Copilot PR review comments on governance-audit hook
...
- Switch from colon to tab delimiter to handle colons in evidence text
- Base64-encode evidence to prevent parsing issues
- Use MAX_SEVERITY in log output and JSON events
- Narrow regex patterns to reduce false positives:
- third[_-]?party instead of third.?party
- Role reassignment scoped to AI terms
- System prompt injection requires 'you are' context
- Fix session-end stats to scope to current session only
- Update privacy statement to clarify evidence snippets are logged
- Rename credential description to 'Possible hardcoded credential'
- Fix database destruction regex to also match semicolons
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-02-18 14:49:17 -08:00
Imran Siddique
da3dbec8b9
Update SKILL.md
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-02-18 14:41:52 -08:00
Imran Siddique
8d942f437b
Update SKILL.md
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-02-18 14:41:40 -08:00
Imran Siddique
33b7464774
feat: add agent-safety instructions and governance reviewer agent
...
- instructions/agent-safety.instructions.md: Guidelines for building safe,
governed AI agent systems (tool access controls, content safety,
multi-agent safety, audit patterns, framework-specific notes)
- agents/agent-governance-reviewer.agent.md: Expert agent that reviews code
for governance gaps and helps implement policy enforcement
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-02-18 13:30:30 -08:00
Imran Siddique
4a4b9343d5
feat: add governance-audit hook — threat detection for Copilot sessions
...
Add real-time governance audit hook that scans prompts for threat signals:
- 5 threat categories: data exfiltration, privilege escalation,
system destruction, prompt injection, credential exposure
- 4 governance levels: open, standard, strict, locked
- Append-only JSON audit trail (logs/copilot/governance/audit.log)
- Session summary with threat counts at session end
- Privacy-aware: logs decisions and metadata, never prompt content
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-02-18 13:29:41 -08:00
Imran Siddique
dcfae78fa4
feat: add agent-governance skill
...
Add governance patterns and techniques for AI agent systems:
- Policy definition with allowlists, blocklists, and content filters
- Semantic intent classification for threat detection
- Tool-level governance decorator pattern
- Trust scoring with temporal decay for multi-agent systems
- Append-only audit trail design
- Framework integration examples (PydanticAI, CrewAI, OpenAI Agents)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-02-18 13:28:25 -08:00
Luiz Bon
9f43980c68
Merge branch 'main' into feat/agent-manager
2026-02-18 20:28:34 +11:00
Luiz Bon
4025fda170
Add VS Code Agent Manager tool with features for managing Copilot agents
2026-02-18 20:25:44 +11:00
Aaron Powell
f51409f91e
ci: add resolution guidance to plugin structure check
...
Provides two options: rebase onto staged (with exact commands using
the contributor's branch name) or manually remove the files.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-02-18 16:52:40 +11:00
Aaron Powell
fb1b9e164b
ci: add workflow to detect materialized files in plugin dirs
...
Checks PRs targeting staged for agent/command/skill files or symlinks
inside plugin directories. These files should only exist on main
(materialized during publish). Requests changes if found.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-02-18 16:50:07 +11:00
Aaron Powell
48994b8c87
ci: limit publish workflow to single concurrent run
...
Cancel any in-progress publish when a new push to staged arrives,
ensuring only the latest version is published to main.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-02-18 15:25:39 +11:00
Aaron Powell
0efa435f50
ci: add workflow to reject PRs targeting main
...
PRs should target the staged branch. This workflow posts a review
requesting changes when a PR is opened against main, with instructions
to retarget to staged.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-02-18 14:49:24 +11:00